Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/MVKZ0dQ8y_JD6VHVYeBKtnjkHto.roa
File: MVKZ0dQ8y_JD6VHVYeBKtnjkHto.roa (raw, json)
Hash identifier: 6ViZjTN6u/r5SZB05cIVEHy8iF823x4QxKfbw4uTorw=
Subject key identifier: 31:52:99:D1:D4:3C:CB:F2:43:E9:51:D5:61:E0:4A:B6:78:E4:1E:DA
Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial: 018CC8711C413835F1D8783D70A80C9DC3E4
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/MVKZ0dQ8y_JD6VHVYeBKtnjkHto.roa
Signing time: Tue 02 Jan 2024 04:31:45 +0000
ROA not before: Tue 02 Jan 2024 04:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13559
IP address blocks: 2a0e:8a84::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 22:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:1c:41:38:35:f1:d8:78:3d:70:a8:0c:9d:c3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Validity
Not Before: Jan 2 04:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=315299d1d43ccbf243e951d561e04ab678e41eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:3c:17:84:04:6f:51:b5:dc:0a:1b:ba:f5:
09:ca:5d:d1:5e:8a:0c:66:41:b3:a9:03:6e:dc:45:
6f:eb:e4:67:4f:b9:1d:25:8c:a8:e8:76:9c:04:b1:
33:bc:f2:80:d9:7a:ef:5b:96:01:13:60:a9:f4:78:
f1:a2:ba:ff:f5:6d:77:92:68:2e:cb:de:48:76:e0:
67:74:fb:bc:f0:1e:1d:a7:53:35:fd:15:ab:39:36:
9c:8e:8a:b5:bc:6b:16:43:ab:8d:64:2b:0e:29:04:
eb:90:93:5a:93:35:4a:a6:0a:bc:19:42:4e:67:05:
5e:42:56:db:ad:2f:2b:77:a0:fe:d5:e1:58:ce:ac:
42:7c:b6:01:d4:ca:24:45:9e:6b:8b:84:09:a0:8f:
4d:22:51:3a:32:51:37:fb:9c:e7:23:2b:0f:b9:ae:
49:f0:ed:ec:8a:ec:a6:19:ed:23:8f:fa:7e:c0:a1:
66:5c:af:b4:d8:f5:8f:04:dd:ce:b1:7b:0e:68:fd:
8d:da:24:2d:1b:42:85:90:a0:d1:34:c5:90:7c:5c:
b9:4f:ed:6d:85:8b:e6:28:f3:12:3d:51:bb:d0:1d:
a9:97:f6:26:b5:ad:22:f7:93:78:f5:5e:b3:93:9f:
9c:74:74:b5:e4:b5:b8:ad:08:9f:4a:39:54:05:f6:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:99:D1:D4:3C:CB:F2:43:E9:51:D5:61:E0:4A:B6:78:E4:1E:DA
X509v3 Authority Key Identifier:
keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/MVKZ0dQ8y_JD6VHVYeBKtnjkHto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8a84::/32
Signature Algorithm: sha256WithRSAEncryption
50:ba:a1:9a:70:fd:8f:6e:4b:19:86:c6:5f:3d:de:08:17:f6:
c5:8c:a9:f4:84:ef:e7:b0:43:c4:1d:3e:3c:36:fc:cc:39:64:
fa:5f:90:7e:6f:2c:b8:da:89:cb:59:5f:07:fb:52:68:26:59:
e8:27:91:60:5c:33:b4:17:1b:c4:7f:2b:93:5c:e1:bf:92:04:
5c:5f:3f:14:7e:8b:46:3f:2d:38:b8:ef:ce:3a:b3:eb:8f:00:
f5:08:44:d6:5a:ea:37:32:7f:7b:42:43:55:af:44:cc:9d:7b:
a9:1e:35:3a:91:d1:be:d5:7c:d1:40:0f:35:f7:f7:64:5a:f0:
df:3c:43:b1:e6:02:ed:7b:78:bc:9c:b5:54:f0:1e:22:31:c3:
08:e6:b7:62:25:fc:e6:50:59:56:d2:60:64:e6:c6:1a:60:cb:
21:11:e2:f1:5b:73:a5:f3:5b:ba:90:f3:9f:8c:7f:4b:e4:91:
49:b2:62:5b:c8:d4:b7:68:7d:ec:e1:1d:0a:9d:77:9b:29:da:
29:e4:92:cf:95:a8:1c:4a:2e:36:32:ba:11:77:c1:22:90:76:
26:73:6f:9b:0a:2f:64:31:4e:db:d7:92:71:e5:63:a2:f7:1f:
e3:57:33:d4:fe:ba:b2:4b:e1:62:e7:a1:ed:e5:8c:96:60:9a:
07:3d:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org